A first look at your website's security.

Enter your public website address. An existing report may appear quickly; new VirusTotal analyses can take longer. Keep this tab open or resume the check here.

A result that is pending or has no detections is not a security clearance. Confirm relevant versions and patches before dismissing an advisory.

Only the domain homepage is sent to VirusTotal. No login or technical access. Public security advisories come from Vulnerability-Lookup. This is not a penetration test; findings may require manual verification.

READY TO CHECK

Results are shown on this page. No email address needed.

Recent security advisories

Recent WordPress, Joomla and known-exploited vulnerability feed activity. These are public alerts, not evidence that your specific website is affected. A public scan may not reveal the underlying PHP version or an installed backdoor. Read the PHP2Shell checklist for checks that require hosting access. For CMS issues, see WordPress WP2Shell and Joomla JCE. Why recent server-side advisories matter

Loading recent advisories…